In accordance with 9 V.S.A. § § 2430 and 2435, the Vermont Security Breach Notice Act requires a data collector or other entity regulated by the Department of Financial Regulation (DFR) to provide notice(s) of a security breach to DFR and the affected consumer, owner or licensee of the data or records breached.
Direct all security breach notices to DFR:
Sheila Grace, General Counsel
Department of Financial Regulation
89 Main St., Montpelier VT 05620-3101
DFR.SecurityBreach@vermont.gov
phone: 802-828-3301
fax: 802-828-1919
Please check out Frequently Asked Questions and read the Security Breach Bulletin regarding July 1, 2020, changes to Vermont’s Security Breach Notice Act.